CVE-2021-32537 Realtek High definition audio Windows driver crashed

2021-07-0714:12:27

twcert

www.cve.org

realtek high definition audio

windows driver

vulnerability

local attackers

system crash

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

AI Score

6.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed.

CNA Affected

[
  {
    "product": "HDA driver",
    "vendor": "Realtek",
    "versions": [
      {
        "lessThanOrEqual": "9150",
        "status": "affected",
        "version": "8155",
        "versionType": "custom"
      }
    ]
  }
]